CVE-2017-11540

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.6-1

Description The issue arises when ImageMagick processes a crafted file, leading to a heap-based buffer over-read in the GetPixelIndex() function. This function is called from the WritePICONImage function in coders/xpm.c.

Recommendations For ImageMagick version 7.0.6-1, consider restricting access to the convert function until a patch is available. As a temporary workaround, avoid using the GetPixelIndex() function or the WritePICONImage function in coders/xpm.c to minimize the risk of exploitation.